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CLAIMS 

Please amend the claims as follows: 

1. (currently amended) A method for managing a user key used to sign a message for a data 
processing system, said method comprising: 

assigning a user key to a user and storing the user key in a n encrypting data processing 
system utilized t o fep encrypting messages; 

encrypting the messages with the user key, 

storing an associated key in the encrypting data processing system and encryptibag the 
user key with the associated key to obtain an encrypted user key; 

said encrypting data Tjrocessine system communicating at least one encrypted messages 
in oonjimotion together with the encrypted user key to a recipient system in order t o permit 
validation of validate an association of the user with the encrypted messages by the recipient 
system: and 

thereafter, preventing validation of the association of the user with messages by revoktag 
the associated key at the encrypting data processing system , 

2. (original) The method according to Claim 1, further comprising: 

decrypting the user key with the associated key; and 
decrypting the messages with the user key. 

3. (currently amended) The method according to Claim 1, wherein: 

the enct Tptin s data processing system further comprises a client system and a server 
system coupled for communication, said client system having a client memory device oouplod to 
a and said server system having an encryption chip and a server memory devicei and w her e in: 

storing the user key in a data proo e ooing oyDtem - for - encrypting mesoageg further 
comprises storing the user key in the client memory device; 
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storing the associated key in th e data prooesging oyDtom further conaprises storing the 
associated key in the server memory device; and 

preventing validation fiarther comprises preventing the validation of %e messages 
associated vvith the user by eliminating the associated key &om the server memory device. 

4. (original) The method according to Claim 3, wherein encrypting the messages further 
comprises: 

sending the messages to be encrypted fixma the client system to the server system; 
encrypting the messages using the encryption chip of the server system; and 
sending the encrypted messages from the server system to the chent system. 

5. (original) The method according to Claim 4, further cotnprising: 

erasing fix>m the server system all data relating to the encrypted messages after the 
encrypted messages are sent from the server system to the client system, 

6. (currently amended) The method according to Claim 1, further comprising: 

encrypting the associated key by using an encryption chip key which is stored on an 
encryption chip of the encrypting data processing system. 

7. (currently amended) The method according to Claim 6, further comprising; 

gnorypting th e- QBCooiatod koy with tho onoryption ohip koy; and 

communicating an encrypted associated key to vaUdate the association of the user with 
the encrypted messages. 

8. (origiaal) The method according to Claim 7, further comprising: 

decrypting the associated key with the encryption chip key. 
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9. (ciirrently amended) A system for managing a user key used to sign a message for a-data 
prooQSGing syst - em , said system comprising: 

means for assigning a user key to a user; aed 

means for storing the user ke y in a data prooeoDing oyctom - for encr^ytipg m e ssag e s ; 

means for encrypting the messages with the user key, 

means for storing an associated keyi in the data processing syst e m - and 

means for encrypting the user key with the associated key to obtain an encrypted user 

key; 

means for coimnunicating at least one encrypted messages in oonjunotion together with 
the encrypted user key to a recinient system m order to permit vahdation of vaUdat e an 
association of the user with the encrypted messages bv the recipient system: and 

means for thereafter preventing validation of the association of the user with messages by 
revoking the associated key in said system . 

10. (original) The system according to Claim 9, fUrther comprising: 

means for decrypting the user key with the associated key; and 
means for decrypting the messages with the user key. 

11. (currently amended) The system according to Claim 9, whereini 

the data r proo e ssing system further comprises a client system and a server system coupled 
together for communication^ said chent system having a client memory device and said coupled 
*e-ft server system having an encryption chip and a server memory device; and wh e r e in: 

said means for storing the user key H - Ha - data - proo e ssing system for e ncrypting m e saag e o 
further comprises means for storing the user key in the chent memory device; 

said means for storing the associated key in th e data proc e ssing -s yst e m further comprises 
means for storing the associated key in the server memory device; and 
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said means for preventing validation further comprises means for preveiiting the 
validation of fee messages associated with the user by eliminating the associated key froxn the 
server memory device. 

12. (original) The system according to Claim 11, wherein said means for encrypting the 
messages further comprises: 

means for sending the messages to be encrypted from the cUent system to the server 
system; 

means for encrypting the messages using the encryption chip of the server system; and 
means for sending the encrypted messages from the server system to the client system. 

13. (original) The system according to Claim 12, fiiither comprising: 

means for erasing from the server system all data relating to the encrypted messages after 
the encrypted messages axe sent ficom the server system to the chent system. 

14. (currently amended) The system according to Claim 9, fixrther comprising: 

moonfl for onorypting an encryption chin that encrypts the associated key by using an 
encryption chip key which is stored within the encryption chip on an encryption chip of th e data 
processing syst e m , 

15. (cimrentiy amended) The system according to Claim 14, further comprising: 

moonD for ^orypting th e ossooiated lc e y^tb - th» onoryption ohip key; and 
means for communicating an encrypted associated key to validate the association of the 
user with the encrypted messages. 

16. (original) The system according to Claim 15, further comprising: 
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means for decrypting the associated key with the encryption chip key. 

17. (currently amended) A program product for managing a user key used to sign a message iep-ft 
data proooGcing Gyctcim , said program product compiising: 

a control program including: 

instruction means for assigning a xjser key to a user and for storing the user key in 
a n encrypting data processing system utilized to ^ encrypting messages; 

instruction means for encrypting the messages with the user key; 

instruction means for storing an associated key in the encrypting data processing 
system and for encrypting the user key with the associated key to obtain an encrypted 
user key; 

instruction means for communicating at least one encrypted messages ia 
conjunction together with the encrypted user key to a recipient system in order to nemiit 
validation of validat e an association of the user with the encrypted messages bv the 
recipient system: 

instruction means for thereafter preventing validation of the association of the 
user with messages by revoking the associated key within the encrypting data processing 
system: and 

computer usable media bearing said control program. 

18. (original) The program product according to Claim 17, further comprising: 

instruction means for decrypting the user key with the associated key; and 
instructioji tneans for decrypting the messages with the user key. 

19. (currently amended) The program product according to Claim 17, wherein; 

the encrypting data processing system further comprises a client system and a server 
system coupled together for communication, said client system having a client memory device 
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and said ooyplod - to - ft server system having an encryption chip and a server memory device; aaad 
wher e in - 

said ijastnactioix means for storing the user key ta - a - data proc e ssing syst e m for e nor^pting 
messag e s further comprises instruction means for storing the user key in the client memory 
device; 

said instruction means for storing the associated key in th e data processing system further 
cotnprises instruction means for storing the associated key in the server memory device; and 

said instruction means for preventing validation further comprises instruction means for 
preventing the validation of the messages associated with the user by eliminating the associated 
key fix>m the server memory device. 

20, (original) The program product according to Claim 19, wherein said instruction means for 
encrypting the messages further comprises: 

instruction means for sending the messages to be eoacrypted from the chent system to the 
server system; 

instruction means for encrypting the messages using the encryption chip of the server 
system; and 

instruction means for sending the encrypted messages from the server system to the client 

system. 

21, (original) The program product according to Claim 20, further comprising: 

instruction means for erasing from the server system all data relating to the encrypted 
messages after tide encrypted messages axe sent from the server system to the client system. 

22, (original) The program product according to Claim 17, further coniprising: 

instruction means for encrypting the associated key by using an encryption chip key 
which is stored on an encryption chip of the data processing system. 
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23. (currently amended) The program product according to Claim 22, further comprising: 

ififl tniotion moans for encryptixig tfa g associat e d k e y with tho onor>TptiQn chip k e y; and 
instruction means for coxninumcating an encrypted associated key to validate the 
association of tbe user with the encrypted messages. 

24. (original) The program product according to Claim 23, fixrther comprising: 

instruction means for decrypting the associated key with the encryption chip key. 
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